CVE ID :CVE-2026-43974 Published : June 8, 2026, 2:12 p.m. | 1 hour, 2 minutes ago Description :Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-43974 - gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM

VERWANDTEARTIKEL

[High] CVE-2026-49234 – When sending a specifically crafted non-UTF-8 string as select-asn query paramet...

[High] CVE-2026-49235 – When Routinator encounters a file via RRDP using a specifically crafted Document...

[High] CVE-2026-49232 – Routinator exits on any error when accepting incoming HTTP or RTR connections, i...

[High] CVE-2026-49233 – Routinator does not properly check the module component of rsync URIs, which are...

[Medium] CVE-2026-43972 – Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows...

[High] CVE-2026-43973 – Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http modul...